Skip to content

MongoDB Enterprise Advanced 7.x Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Database contents must be protected from unauthorized and unintended information transfer by enforcement of a data-transfer policy.

    Applications, including DBMSs, must prevent unauthorized and unintended information transfer via shared system resources. Data used for the development and testing of applications often involves c...
    Rule Medium Severity
  • SRG-APP-000243-DB-000373

    Group
  • SRG-APP-000177-DB-000069

    Group
  • MongoDB must map the PKI-authenticated identity to an associated user account.

    The DOD standard for authentication is DOD-approved PKI certificates. Once a PKI certificate has been validated, it must be mapped to a DBMS user account for the authenticated identity to be meanin...
    Rule Medium Severity
  • SRG-APP-000178-DB-000083

    Group
  • SRG-APP-000179-DB-000114

    Group
  • MongoDB must use NIST FIPS 140-2 or 140-3 validated cryptographic modules for cryptographic operations.

    Use of weak or not validated cryptographic algorithms undermines the purposes of using encryption and digital signatures to protect data. Weak algorithms can be easily broken and not validated cryp...
    Rule High Severity
  • SRG-APP-000180-DB-000115

    Group
  • SRG-APP-000211-DB-000122

    Group
  • MongoDB must separate user functionality (including user interface services) from database management functionality.

    Information system management functionality includes functions necessary to administer databases, network components, workstations, or servers and typically requires privileged user access. The se...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules